Questions tagged [wmi]
Windows Management Instrumentation
397
questions
39
votes
9
answers
168k
views
Which permissions/rights does a user need to have WMI access on remote machines?
I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons.
Is this possible? What ...
32
votes
6
answers
8k
views
Should I install Windows Management Framework 3.0?
I'm posting this as a BIG CAVEAT to everyone. I know it's not a standard Q&A, but I think this is something every Windows admin should know. There is a very real risk of falling into Big Troubles.
...
22
votes
2
answers
167k
views
Why is my System event log full of WMI Performance Adapter messages?
The System event log continually shows these messages:
The WMI Performance Adapter service
entered the running state.
and then
The WMI Performance Adapter service
entered the stopped state.
...
21
votes
2
answers
61k
views
What is stored in %Windir%\System32\LogFiles\WMI\RtBackup?
I occasionally notice in Resource Monitor hard disk activity related to ETL files in the folder C:\Windows\System32\LogFiles\WMI\RtBackup.
Which process/service creates these ETL files and what is ...
20
votes
8
answers
13k
views
Identify Windows 2012 Server core
I want to detect if a 2012 server is has been setup as a Core install using WMI. An earlier question, would seem to indicate that I can get the OperatingSystemSKU from Win32_OperatingSystem. My ...
15
votes
1
answer
16k
views
SCCM 2012 SP1 - DownloadContentFiles() failed with hr=0x80041013
We noticed our Automatic Deployment Rules for Software Updates failed to automatically download and apply this month's patches from Microsoft although they are correctly listed in the Catalog.
The ...
14
votes
8
answers
58k
views
What is the best (free) tool to wrap an .exe into a MSI?
I'm looking at deploying some software via GPSI and the current version of the software is distributed as a .exe so I need to convert it to an MSI file.
furthermore, why does MS still distribute some ...
14
votes
5
answers
17k
views
What is the closest equivalent of "load average" in Windows available via WMI?
Linux has a notion of Load Average which is defined as:
System load averages is the average number of processes that are either in a runnable or uninterruptable state. A process in a runnable state ...
14
votes
1
answer
7k
views
Common WQL Monitoring Queries
What WQL queries would you use for monitoring typical Windows bottlenecks? Which would you use to obtain data similar to 'top' or 'netstat'? What interval would you poll at?
Here are a few that I ...
12
votes
1
answer
4k
views
Is anyone using an SNMP and/or WMI poller to push custom metrics to Amazon CloudWatch, and if so how?
Amazon CloudWatch has a decent console, and an alarm system which uses Amazon SNS for notifications.
Originally it only gave you AWS metrics, e.g. EC2 instance CPU utilization.
Recently they added ...
11
votes
3
answers
2k
views
Installing Windows Management Framework 3.0 basically destroyed WMI, how can I fix it without reinstalling the O.S.?
Related, of course, to this question.
Before discovering it was somewhat... dangerous, I installed Windows Management Framework 3.0 on a number of Windows Server 2008 R2 SP1 servers, and WMI got ...
11
votes
2
answers
6k
views
WmiPrvSE memory leak on Windows 2008 *R2*
I've seen references on Windows 2008 to WmiPrvSE leaks, but nothing about Windows 2008 R2.
We're running R2 on top of Hyper-V (2008). We are also running NSClient++ for monitoring from opsview. Over ...
11
votes
4
answers
13k
views
Windows 10 WMI and Event Viewer access denied
We have a Windows domain where I used GPOs to enable remote management and monitoring of all of our workstations using WMI. I can also connect to all of our computers with Computer Management and ...
11
votes
4
answers
30k
views
Network Logon Issues with Group Policy and Network
I am gravely in need of your help and assistance.
We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ ...
10
votes
1
answer
159k
views
How to use WMIC to connect to remote machine and output OS information to a file?
I want to know how to use WMIC to connect to remote host and output their PC's OS information(Installed programs list) to a file.
I tried
wmic /node: <IP address> OS get vendor, name > c:\...
10
votes
5
answers
66k
views
How to find the creation date of a local user account?
I would like to get the creation date of a local user account (Win 7 if it matters). I've looked at the following WMI objects (and google of course):
Win32_UserAccount
Win32_NetworkLoginProfile
The ...
10
votes
2
answers
114k
views
List ALL Printers using Powershell
I'm having issues listing all the printers on a computer using Powershell.
We have a batch script that will add/remove/list "per computer" printers using PrintUI.
I can use PrintUI to list the ...
9
votes
1
answer
8k
views
DFSR-related WMI info is missing
OS: Server 2012 Core and Server 2012 R2 Core.
DFS-Replication is installed and appears healthy.
I am using WMI to collect information from DFSR replication members. The queries work on many of the ...
8
votes
1
answer
22k
views
How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)
I need to apply a GPO only to some computers in a specific network range.
I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
8
votes
2
answers
7k
views
powershell: How to check if S.M.A.R.T is enabled on remote machines
I was attempting to get disk info of remote machines, including whether or not SMART is enabled on the drive by using the win32_diskdrive class.
This is trickier than I thought. While it's easy ...
8
votes
1
answer
3k
views
How to accept EULAs for Software updates deployed through SCCM using Powershell
I'm trying to use the Start-CMSoftwareUpdateDeployment cmdlet to deploy a software update group to an existing collection.
PS WHO:\> Start-CMSoftwareUpdateDeployment -SoftwareUpdateGroupName "...
8
votes
3
answers
11k
views
SCCM Global Condition WQL Query Type Mismatch (wbemErrTypeMismatch - 0x80041005)
We have been handling all of our targeting logic for Packages (and now Applications) with Collections. Now that we have moved from SCCM 2007 to SCCM 2012 SP1 it was recommended that we move that logic ...
7
votes
2
answers
42k
views
How to monitor DFSR backlog more efficiently than dfsrdiag
Is there a way to monitor the DFSR backlog in a manner more efficient than using dfsrdiag.exe backlog?
I wrote a program that just slurps in the backlog count via dfsrdiag.exe backlog /smem:alpha /...
7
votes
1
answer
395
views
GPO software deployment without WMI?
I put together a GPO to deploy a MSI file to a security group comprised of computer objects. After rebooting a test workstation so that it picks up its group membership and running gpupdate, I then ...
7
votes
1
answer
5k
views
What wmi counters can indicate port exhaustion
I'm currently investigating an issue in which we suspect port exhaustion from too many outgoing connections is a factor. I'd like be able to identify when the server is at or near to port exhaustion, ...
7
votes
2
answers
3k
views
What are the minimum permissions to read the WMI class 'MSSerial_PortName'?
I am configuring a local application user (part of BUILTIN\Users) on a Windows 7 kiosk. The kiosk has a special USB device running on a virtual COM port. The user needs permission to read the WMI ...
6
votes
5
answers
3k
views
Powershell recursive WMI query
I'd like to start at the top of a WMI namespace, recurse through all the objects, then recurse through each object's property list, filtering out and returning to console only those properties that ...
6
votes
3
answers
32k
views
Is there a way to set access to WMI using GroupPolicy?
From various documentation it appears that to change WMI access you need to use WMI to access the running service and modify specific parts of the tree.
Its kind of annoying changing 150,000 hosts ...
6
votes
2
answers
677
views
identify / fingerprint a Windows Server core installation versus full
Seems like this should be easy, but I am not finding any information on how to remotely identify a Windows Server "core" installation as such, via WMI, Powershell or other method that can query lots ...
6
votes
1
answer
130
views
WMI permissions for changing local IP without elevated privileges
I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings ...
6
votes
1
answer
11k
views
WMI Rights required to read root\MicrosoftIISv2 in IIS7 with IIS6 compatibility mode
I need to manage my IIS7 (Windows Server 2008) remotely with a WMI IIS6 API. So I added the IIS6 WMI Compatibility and IIS6 Metabase Compatibility roles to access the root\MicrosoftIIsv2 namespace.
I ...
6
votes
1
answer
3k
views
Have issue with monitoring 32bit app pools running on 64bit IIS
I am performing a monitoring task on my 64bit web server which has couple of applications pools running in 32bit mode. I am using .Net CLR Memory object in perfmon to monitor them. However, my ...
6
votes
0
answers
2k
views
Powershell Remoting not working
I have PSRemoting working on 90% of my servers. But there are a handful that I'm not sure what's going on with them. Server 2016.
Most of them are Hyper-V hosts, but not all.
Enable-PSRemoting -...
6
votes
3
answers
3k
views
Correlating volumes and physical disks through WMI
I'm trying to correlate volumes (as enumerated from win32_volume for those where DriveType = 3) back to win32_physicaldisk instances. Everything that I've seen in my research points to the answer ...
5
votes
6
answers
6k
views
Useful WMI admin scripts
In a comment to my response to this question , cop1152 said he loved WMI scripts. Well, so do I!
What are your favourite, best, most useful scripts you'd like to share with the community?
thanks.
5
votes
3
answers
2k
views
checking for missing values in WQL or (WQL/WMI filter to return `true` for desktops/servers, but `false` on laptops)
I have a challenge where I want to use a GPO to set a Power Plan.
Working on constructing a WMI Filter (using WQL), I ran into a problem of determining a set of WQL statements that would always ...
5
votes
3
answers
4k
views
How to detect current media type in CLI under Windows? (DVD-RW, BD-R, etc)
How to detect current media type in CLI under Windows? (DVD-RW, BD-R, etc)
I've tried with wmic cdrom get /format:list but no info about the current media type.
I want to detect if the disc is a CD, ...
5
votes
2
answers
7k
views
Can I find the path to a DCOM application executable with WMI or Powershell?
I have installed (and registered) a DCOM application on a W2K8R2 machine, and its GUID can be found in the DCOM list shown by dcomcnfg.
I can also use Powershell to find a Win32_DCOMApplication or ...
5
votes
1
answer
7k
views
Win32_OperatingSystem.FreePhysicalMemory and $_.TotalVisibleMemory giving output in wrong units
I've been putting together a pretty simple script to monitor some aspects of our Terminal Server farm usage and am implementing a section where I check the memory usage on the servers at a given point ...
5
votes
1
answer
4k
views
Difference between CurrentClockSpeed and MaxClockSpeed
Rationale this belongs on ServerFault rather than StackOverflow - I already have my program which gets the value, I am querying the value returned and what it means.
I have an in-house program which ...
5
votes
4
answers
4k
views
Does WMI cause CPU Creep?
I have a few servers, running Server 2003 Std/Ent and SQL 2000/2005, that I've noticed will start showing higher CPU usages over time. Stopping the WMI service and restarting it will always bring it ...
5
votes
3
answers
3k
views
How to retrieve Serial Number from Windows on new U/EFI box?
I need to retrieve the hardware serial numbers from a set of new HP mini desktops that need provisioning.
This worked in the past using a WSH script to query it via WMI. Unfortunately, the newer ...
5
votes
2
answers
8k
views
How do I identify a volume in WMI from a volume name reported in the event log?
I have a Windows 2008R2 server that's reporting the following error:
The file system structure on the disk is corrupt and unusable. Please
run the chkdsk utility on the volume \Device\...
5
votes
1
answer
171
views
Bug in WMI namespace for MicrosoftDNS Statistics class?
I'm trying to query DNS statistics from Windows Server 2012 via WMI.
If I run the following command in Powershell:
Get-WmiObject -Namespace root\MicrosoftDNS -Class MicrosoftDNS_Statistic | ?{ $_....
5
votes
3
answers
17k
views
WMI: wmic linux agent query error: NTSTATUS: NT_STATUS_ACCESS_DENIED
Myself new to wmic and keep trying for a long time with default agent query approach.
wmic is linux based WMI tool to talk to windows WMI agent. While trying to fetch data with wmic from nt(win7 with ...
5
votes
1
answer
1k
views
WMI Impersonation levels within vbscript / ASP code
I have an IIS 7.5 web site running "classic" ASP code (not ASP.NET) where the site is running under the normal service context, and only "Windows Authentication" is enabled. Users and navigate the ...
5
votes
4
answers
7k
views
WMI permissions: Select CommandLine, ProcessId FROM Win32_Process returns no data for CommandLine
I am gathering performance data via WMI and would like to avoid having to use an account in the Administrators group for this purpose. The target machine is running Windows Server 2003 with the latest ...
5
votes
2
answers
2k
views
How to map which volume resides on which partition in Windows?
Problem: I need to figure out which volume corresponds to what partition(s) which corresponds to what disk in an extremely efficient script able manor. I know how to correspond which partition ...
5
votes
1
answer
10k
views
WMI filter for Internet Explorer 10+
I need to apply a GPO on all machines with IE 10+ but the setting does not need to be and shouldn't be applied to ie 9. All the machines are Windows Vista, 7, and 8 (some 32 bit and others 64).
I ...
5
votes
3
answers
2k
views
How do I launch a command on a remote computer with an invalid domain trust? (using local creds)
I intend to use WMIC to reset the trust of a machine that is remote, and off the network. All of the following variations result in an "access denied":
The following works fine:
net use \\patterson-...